shared-ext-update-static-files-workflow.yml

name: Shared Update Static Files Workflow
on:
  workflow_call:
    inputs:
      commontoolingBranch:
        description: 'Commontooling branch or tag to use'
        required: true
        default: 'main'
        type: string
    secrets:
      WRITE_ACCESS_DEPLOY_KEY:
        description: 'A deploy key that is used to checkout code with write access'
        required: true
      COMMONTOOLING_DEPLOY_KEY:
        description: 'A deploy key that is used to fetch Commontooling'
        required: true
      AWS_ACCOUNT_ID:
        description: 'An AWS Account ID, used to access ECR'
        required: true

env:
  COMMONTOOLING_BRANCH: ${{ inputs.commontoolingBranch == '' && 'main' || inputs.commontoolingBranch }}

jobs:
  UpdateStaticFiles:
    permissions:
      contents: read
      id-token: write
    runs-on: ubuntu-22.04
    environment:
      name: update-static-files
    steps:
      - name: Check out repository code
        uses: actions/checkout@v4
        with:
          fetch-depth: 1
          ssh-key: ${{ secrets.WRITE_ACCESS_DEPLOY_KEY }}

      - name: Configure AWS Credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/gha_ecr_public_read
          role-session-name: GitHub_to_AWS_via_FederatedOIDC
          aws-region: us-east-1

      - name: Login to Amazon ECR
        id: login-ecr
        uses: aws-actions/amazon-ecr-login@v2
        with:
          registry-type: public
          mask-password: true

      - name: Initialise commontooling
        uses: actions/checkout@v4
        with:
          repository: bbc/rd-cloudfit-commontooling
          ref: ${{ env.COMMONTOOLING_BRANCH }}
          path: commontooling
          fetch-depth: 1
          ssh-key: ${{ secrets.COMMONTOOLING_DEPLOY_KEY }}

      - name: Configure git user info
        run: |
          git config --local user.email "github-actions@github.com"
          git config --local user.name "GitHub Actions"

      - name: Update static files
        run: |
          make static-files

      - name: Show git status
        run: |
          git status

      - name: Commit static file changes
        id: commitStaticFileChanges
        run: |
          git add .
          if git commit -a -m "Regenerate static files"
          then
            echo "haveChanges=true" >> $GITHUB_OUTPUT;
          else
            echo "haveChanges=false" >> $GITHUB_OUTPUT;
          fi

      - name: Push static file changes
        if: ${{ steps.commitStaticFileChanges.outputs.haveChanges == 'true' }}
        run: |
          git push

      - name: Adding summary
        run: |
          if [ '${{ steps.commitStaticFileChanges.outputs.haveChanges }}' == 'true' ]
          then
            echo "The static files have been updated" >> $GITHUB_STEP_SUMMARY
          else
            echo "There are no static file updates" >> $GITHUB_STEP_SUMMARY
          fi